USN-2953-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.49 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Ubuntu 15.10 has been updated to MySQL 5.6.30. In addition to security fixes, the updated packages...

ALPINE-CVE-2016-0647

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to FTS...

UBUNTU-CVE-2016-0662

Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Partition...

WAP Music CMS 1.0.2 SQL Injection

========================================================== + Title :- WAP MUSIC CMS - SQL INJECTION + Date :- 24 - MAR - 2016 + Vendor Homepage :- www.wapforum.org + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :- webapps + Google Dorks :-...

Damn Vulnerable Web Services: DVWS

Damn Vulnerable Web Services is a vulnerable testing environment that can be used to learn real world web service vulnerabilities. The aim of this project is to aid security professionals in testing their skills and tools in a legal environment. This application is designed to understand the...

USN-2881-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.47 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Ubuntu 15.04 and Ubuntu 15.10 have been updated to MySQL 5.6.28. In addition to security fixes, th...

The vulnerability of the MySQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the Client sub-component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability allows a local attacker to execute arbitrary code...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component in the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a crash or, in rare cases, cause an emergency shutdown through network packets...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component in the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a crash or, in rare cases, cause an emergency shutdown through network packets...

Unspecified Vulnerability in Solaris Cluster HA for MySQL Component

Solaris is a unix-based operating system. An unspecified vulnerability in the Solaris Cluster HA for MySQL component allows local attackers to exploit the vulnerability to gain unauthorized access to data, modify data, and launch denial-of-service attacks...

XMB - eXtreme Message Board 1.9.11.13 Weak Crypto / Insecure Password Storage

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/XMB-WEAK-CRYPTO.txt Vendor: ============== xmbforum2.com Product: ====================================== XMB - eXtreme Message Board v1.9.11.13 XMB forum software is open source and runs...

Advanced Electron Forum 1.0.9 - Persistent Cross-Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AEF-XSS.txt Vendor: ============================= www.anelectron.com/downloads/ Product: ==================================== Advanced Electron Forum v1.0.9 AEF Exploit patched current...

Advanced Electron Forum 1.0.9 - Persistent Cross-Site Scripting

Exploit for php platform in category web applications + Credits: hyp3rlinx Vendor: ============================= www.anelectron.com/downloads/ Product: ==================================== Advanced Electron Forum v1.0.9 AEF Exploit patched current version. Vulnerability Type: ===================...

Advanced Electron Forum 1.0.9 - Persistent Cross-Site Scripting

Advanced Electron Forum 1.0.9 - Persistent Cross-Site Scripting + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AEF-XSS.txt Vendor: ============================= www.anelectron.com/downloads/ Product: ==================================...

PT-2015-2983 · Mariadb +7 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.46 and earlier MariaDB versions prior to 5.5.47 MariaDB versions 10.0.x prior to 10.0.23 MariaDB versions 10.1.x prior to 10.1.10 Description: The issue is related to errors in the Optimizer component of the MySQL...

HumHub 0.11.2 and 0.20.0-beta.2 - SQL Injection Vulnerability

HumHub versions 0.11.2 and 0.20.0-beta.2 suffer from a remote SQL injection vulnerability. === LSE Leading Security Experts GmbH - Security Advisory 2015-10-14 === HumHub - SQL-Injection ------------------------------------------------------------------------ Tested Versions =============== HumHu...

HumHub 0.11.2 / 0.20.0-beta.2 SQL Injection

=== LSE Leading Security Experts GmbH - Security Advisory 2015-10-14 === HumHub - SQL-Injection ------------------------------------------------------------------------ Tested Versions =============== HumHub 0.11.2 and 0.20.0-beta.2 Issue Overview ============== Vulnerability Type: 89 - Improper...

The vulnerability of the MySQL database management system allows a hacker to modify data.

The vulnerability of the Server sub-component in the Security section relates to errors in the code of the MySQL database management system. Exploiting this vulnerability allows a malicious actor to remotely modify data...

The vulnerability of the MySQL database management system allows a hacker to perform unauthorized data reading.

Vulnerability of the Server sub-component: The types of the MySQL database management system are related to errors in the code. Exploiting this vulnerability allows a malicious actor to perform unauthorized data reading remotely...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

Vulnerability of the Server subcomponent: The partitioning of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...